Scan report · about 2 months agoPublic

googleblog.com

192.178.25.1AS15169 · US
Landed onhttps://blog.google/· 2 redirects
Engine tags
Verdict

What happened

Step by step, from what the scanner recorded.
Load 4.0 s · 69 requests
01 · Visitor opensgoogleblog.com
02 · Redirected · 2 hopsblog.google
03 · Page shown
News from Google | Google Product and Technology News and Storiesstyled as Google · high
04 · OutcomeCredential phishingA login page wearing a brand it does not own.

Be careful — warning signs found

Automated

It presents itself as Google while being hosted somewhere Google does not own. This site shows signs commonly seen in scams or impersonation, but we could not confirm it for certain. It may be a real threat, or it may be a legitimate site that simply looks unusual to our automated checks.

What to do

Avoid entering passwords or payment details until you are sure it is genuine. Open the company directly from its known website or app instead of this link. Check the evidence below and escalate to your analyst if unsure.

"Suspicious" is a caution, not a confirmation — it can be a false alarm. The evidence below explains why it was flagged.

Findings

Strongest first
SupportingBrand impersonation detected
Google · high

The page presents itself as a known brand (brand keywords/branding detected).

Analyst noteHigh confidence: brand keywords AND a password field — classic credential phishing.

InfoCross-domain scripts injected at runtime
3 script(s)

The page dynamically injected scripts from other domains. This is extremely common on legitimate sites (CDNs, analytics, asset domains) and is shown for context only.

Analyst noteNoisy by itself — a CDN/asset domain (e.g. a brand's own *.githubassets.com) is normal. Only meaningful if the source domain is unrelated/suspicious.

Infrastructure

IP
192.178.25.1GOOGLE - Google LLC, US · AS15169US
TLS
CN=WR2, O=Google Trust Services, C=US · expires Oct 12, 2026
Redirects
2 hops · / → /

WHOIS

Registrar
MarkMonitor Inc.
Created
Jun 29, 2002
Expires
Jun 29, 2027
Nameservers
ns1.google.comns2.google.comns3.google.comns4.google.com
17 malicious38 suspicious

Hashes & fingerprints

Page capture

Live

Title “News from Google | Google Product and Technology News and Stories” · brand shown: Google (high)

Engines

7 · time to verdict

Page

HTTP
200 · Completed
Title
News from Google | Google Product and Technology News and Stories
Load
3.97 s · 69 requests
Stack · 7Cart FunctionalityGoogle AnalyticsGoogle Cloud Load BalancingGoogle Cloud TraceGoogle Tag ManagerOpen Graph